Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-15080 DRUPAL-CONTRIB-2026-071EUVD-2026-43075GHSA-mc8w-75w5-4c78

Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071

Published Jul 10, 2026 · Updated Jul 13, 2026 · Assigned by drupal

Vendor: Drupal Product: Ray Enterprise Translation Package: drupal/lingotek Ecosystem: Packagist

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.4, from 11.0.0 to 11.0.4.

Affected products

VendorProductAffectedFixed
Drupal Ray Enterprise Translation 0.0.0 – < 4.0.4, 4.1.0 – < 4.1.4, 11.0.0 – < 11.0.4 4.0.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/lingotek < 4.0.4 · >= 4.1.0, < 4.1.4 · >= 11.0.0, < 11.0.4 4.0.4, 4.1.4, 11.0.4 DRUPAL-CONTRIB-2026-071

Advisories 1

References